$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/410cc5b5-ec8b-33cd-bd9c-ea78a383e32f.roa File: 410cc5b5-ec8b-33cd-bd9c-ea78a383e32f.roa (raw, json) Hash identifier: 2zq2UZfeU9Oz4vEO0rM78GQCQmQaKsZdaONhzSKnk9w= Subject key identifier: 65:55:B4:20:52:B8:BE:BE:C2:74:CA:DC:F4:B9:DF:50:09:C9:E0:F1 Certificate issuer: /CN=b2f0a061-78dd-4d61-988a-266b192d9caa Certificate serial: 010D0C9F4328584F498871B5BAA23BC9C3DECFC0 Authority key identifier: 65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/410cc5b5-ec8b-33cd-bd9c-ea78a383e32f.roa Signing time: Fri 25 Sep 2026 01:00:12 +0000 ROA not before: Fri 25 Sep 2026 01:00:12 +0000 ROA not after: Thu 24 Dec 2026 02:00:12 +0000 asID: 212312 IP address blocks: 2001:470:337::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft rsync://rpki.arin.net/repository/arin-rpki-ta.cer Signature path expires: Mon 28 Sep 2026 12:00:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:0d:0c:9f:43:28:58:4f:49:88:71:b5:ba:a2:3b:c9:c3:de:cf:c0 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b2f0a061-78dd-4d61-988a-266b192d9caa Validity Not Before: Sep 25 01:00:12 2026 GMT Not After : Dec 24 02:00:12 2026 GMT Subject: CN=f8926bd0-1a43-4ea9-9dd8-45c323859fbc Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:b7:b1:18:a8:d5:7e:d6:76:da:40:86:be:f8: 7e:a7:19:fe:3d:66:ed:36:ff:2a:72:7e:f5:6f:3b: 3a:f5:1e:74:b5:53:72:7b:03:c1:04:37:3a:f8:15: 2d:d1:f6:2a:5b:f5:da:96:6d:90:44:9c:cb:f6:1d: 50:19:0f:ca:b9:c0:ec:62:3d:28:aa:b4:a9:f4:c4: 1f:28:24:b2:de:3f:b5:74:b2:d4:7f:b9:6a:c3:e5: c7:0f:b3:39:21:0c:3c:a9:e9:e8:ab:c0:3c:77:31: e0:7b:d3:52:15:41:00:59:d1:92:a5:2b:bd:c1:45: 5c:58:27:d3:20:3b:b4:c8:b2:9a:a7:dd:92:24:4f: c7:62:13:41:c7:e6:cc:7b:47:8c:f5:00:15:9b:5f: ce:a4:3f:b8:1b:f6:1b:66:f0:46:89:30:5c:f2:b1: bd:c5:6c:25:22:62:f3:09:7a:fc:7a:19:47:ff:66: 2a:96:67:47:da:00:46:8f:2c:e7:b1:9c:05:5d:23: 1f:27:67:d7:90:43:ca:84:9e:a4:47:be:af:39:60: de:da:68:23:84:11:f9:e5:d6:fb:f0:5d:35:94:f9: a5:aa:fb:b8:4e:b9:be:2b:ce:39:48:6f:fb:aa:82: 13:c9:e6:c6:37:c3:8d:e2:2b:66:7e:29:df:d9:a1: eb:71 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 65:55:B4:20:52:B8:BE:BE:C2:74:CA:DC:F4:B9:DF:50:09:C9:E0:F1 Subject Information Access: Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/410cc5b5-ec8b-33cd-bd9c-ea78a383e32f.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa/b2f0a061-78dd-4d61-988a-266b192d9caa.crl X509v3 Authority Key Identifier: keyid:65:A7:42:86:AE:AF:E2:C9:E3:E9:B9:06:2B:C6:46:05:9C:98:6F:CF X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2f0a061-78dd-4d61-988a-266b192d9caa.cer sbgp-ipAddrBlock: critical IPv6: 2001:470:337::/48 X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.arin.net/resources/rpki/cps.html Signature Algorithm: sha256WithRSAEncryption aa:e3:2b:6a:14:4d:ac:b9:d8:55:18:94:6c:3c:a9:bd:83:9e: d2:45:36:cc:04:78:61:dc:ba:2f:b6:6d:05:29:6f:a6:91:f3: 27:b4:e6:c9:cc:9a:4b:a6:a6:2b:80:e0:0b:a2:a7:75:ca:d2: c6:0c:53:dc:ff:ce:3a:c9:c5:21:23:39:18:ae:ad:2a:ae:3e: 7d:f4:ba:0d:a0:9d:65:63:1b:bd:f3:d5:98:32:ad:77:89:c8: 14:aa:f7:95:b4:1c:a3:3e:5c:0a:63:68:e8:22:18:09:68:38: 0a:b9:97:f1:b0:30:ae:a8:e9:c2:d9:50:73:b1:36:40:a3:a8: 85:0a:91:fd:3a:7a:37:b7:4b:3b:90:0c:fc:9a:f4:c0:8f:6e: eb:b4:c5:2b:4c:38:0b:ad:86:32:72:dd:76:1e:96:93:e5:57: 59:51:67:99:88:2f:0f:67:b4:7e:87:6e:6d:89:24:ab:4d:4d: 38:5e:77:93:8e:d5:b2:b0:db:fe:37:95:c6:a1:5b:96:a1:db: 1a:74:17:35:d8:5c:cf:5d:19:8d:59:ce:23:64:f5:36:80:7e: 58:f9:58:a0:f5:63:90:b9:f0:62:d0:c3:ed:96:94:cc:a9:fb: 54:a2:91:24:bf:97:a2:a6:f5:43:71:7f:d5:3b:8f:b5:ea:e4: 8c:e1:ea:39 -----BEGIN CERTIFICATE----- MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JiHG1uqI7ycPez8AwDQYJKoZIhvcNAQEL BQAwLzEtMCsGA1UEAxMkYjJmMGEwNjEtNzhkZC00ZDYxLTk4OGEtMjY2YjE5MmQ5 Y2FhMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk Zjg5MjZiZDAtMWE0My00ZWE5LTlkZDgtNDVjMzIzODU5ZmJjMIIBIjANBgkqhkiG 9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLexGKjVftZ22kCGvvh+pxn+PWbtNv8qcn71 bzs69R50tVNyewPBBDc6+BUt0fYqW/Xalm2QRJzL9h1QGQ/KucDsYj0oqrSp9MQf KCSy3j+1dLLUf7lqw+XHD7M5IQw8qenoq8A8dzHge9NSFUEAWdGSpSu9wUVcWCfT IDu0yLKap92SJE/HYhNBx+bMe0eM9QAVm1/OpD+4G/YbZvBGiTBc8rG9xWwlImLz CXr8ehlH/2YqlmdH2gBGjyznsZwFXSMfJ2fXkEPKhJ6kR76vOWDe2mgjhBH55db7 8F01lPmlqvu4Trm+K845SG/7qoITyebGN8ON4itmfinf2aHrcQIDAQABo4IDWDCC A1QwHQYDVR0OBBYEFGVVtCBSuL6+wnTK3PS531AJyeDxMIHlBggrBgEFBQcBCwSB 2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYw YTA2MS03OGRkLTRkNjEtOTg4YS0yNjZiMTkyZDljYWEvNDEwY2M1YjUtZWM4Yi0z M2NkLWJkOWMtZWE3OGEzODNlMzJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJmMGEwNjEtNzhkZC00ZDYxLTk4 OGEtMjY2YjE5MmQ5Y2FhL2IyZjBhMDYxLTc4ZGQtNGQ2MS05ODhhLTI2NmIxOTJk OWNhYS5jcmwwHwYDVR0jBBgwFoAUZadChq6v4snj6bkGK8ZGBZyYb88wDgYDVR0P AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmYwYTA2MS03OGRkLTRkNjEtOTg4YS0yNjZi MTkyZDljYWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAIAEEcAM3 MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6 Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN AQELBQADggEBAKrjK2oUTay52FUYlGw8qb2DntJFNswEeGHcui+2bQUpb6aR8ye0 5snMmkumpiuA4Auip3XK0sYMU9z/zjrJxSEjORiurSquPn30ug2gnWVjG73z1Zgy rXeJyBSq95W0HKM+XApjaOgiGAloOAq5l/GwMK6o6cLZUHOxNkCjqIUKkf06eje3 SzuQDPya9MCPbuu0xStMOAuthjJy3XYelpPlV1lRZ5mILw9ntH6Hbm2JJKtNTThe d5OO1bKw2/43lcahW5ah2xp0FzXYXM9dGY1ZziNk9TaAflj5WKD1Y5C58GLQw+2W lMyp+1SikSS/l6Km9UNxf9U7j7Xq5Izh6jk= -----END CERTIFICATE-----Generated at Sun Sep 27 09:52:55 2026 by rpki-client